What Does Colorado Privacy Act Profiling Opt-out Require?
| Status | In force |
|---|---|
| Right | Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects |
| Relevance to pricing | Legal or similarly significant effects include the provision or denial of financial or lending services, housing, insurance, education, criminal justice, employment, health care, or access to essential goods or services (C.R.S. § 6-1-1303) |
| Limited exception | Under Rule 9.04 a controller may decline some opt-out requests where profiling uses Human Involved Automated Processing (a human meaningfully considers the data and can change the outcome), subject to notice conditions |
| Enforcement | Attorney General and district attorneys |
Does Human Review Affect the Profiling Opt-Out?
That is a question for counsel. A rule-based pricing system makes human review visible and documented, which is the evidence the exception turns on. See the Govern stage.
How Can a Business Comply with Colorado Privacy Act Profiling Opt-Out?
- 5. Govern: Version every rule so any past price can be rebuilt.